mirror of
https://github.com/SabreTools/BinaryObjectScanner.git
synced 2026-07-08 18:06:34 +00:00
Add Reflexive Arcade Installer detection (fixes #102)
This commit is contained in:
@@ -1,4 +1,3 @@
|
||||
using System;
|
||||
using BinaryObjectScanner.Interfaces;
|
||||
using SabreTools.Matching;
|
||||
using SabreTools.Serialization.Wrappers;
|
||||
|
||||
30
BinaryObjectScanner/Packer/ReflexiveArcadeInstaller.cs
Normal file
30
BinaryObjectScanner/Packer/ReflexiveArcadeInstaller.cs
Normal file
@@ -0,0 +1,30 @@
|
||||
using BinaryObjectScanner.Interfaces;
|
||||
using SabreTools.Serialization.Wrappers;
|
||||
|
||||
namespace BinaryObjectScanner.Packer
|
||||
{
|
||||
/// <summary>
|
||||
/// Reflexive Arcade Installer
|
||||
/// </summary>
|
||||
public class ReflexiveArcadeInstaller : IExecutableCheck<PortableExecutable>
|
||||
{
|
||||
/// <inheritdoc/>
|
||||
public string? CheckExecutable(string file, PortableExecutable exe, bool includeDebug)
|
||||
{
|
||||
// Get the .data/DATA section strings, if they exist
|
||||
var strs = exe.GetFirstSectionStrings(".data") ?? exe.GetFirstSectionStrings("DATA");
|
||||
if (strs != null)
|
||||
{
|
||||
// <see href="https://www.virustotal.com/gui/file/33b98b675d78b88ed317e7e52dca21ca07bd84e79211294fcec72cab48d11184"/>
|
||||
if (strs.Exists(s => s.Contains("ReflexiveArcade")))
|
||||
return "Reflexive Arcade Installer";
|
||||
|
||||
// <see href="https://www.virustotal.com/gui/file/33b98b675d78b88ed317e7e52dca21ca07bd84e79211294fcec72cab48d11184"/>
|
||||
if (strs.Exists(s => s.Contains("Reflexive Arcade")))
|
||||
return "Reflexive Arcade Installer";
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -170,6 +170,7 @@ Below is a list of executable packers detected by BinaryObjectScanner. The three
|
||||
| PECompact | Yes | No | No | |
|
||||
| PEtite | Yes | No | No | |
|
||||
| PKLITE32 | Yes | No | No | |
|
||||
| Reflexive Arcade Installer | Yes | No | No | |
|
||||
| Setup Factory | Yes | No | No | |
|
||||
| Shrinker | Yes | No | No | |
|
||||
| Smart Install Maker | Yes | No | No | |
|
||||
|
||||
Reference in New Issue
Block a user